Medium 5.9Published Feb 27, 2019

CVE-2019-1559If an application encounters a fatal protocol error and then calls SSL_shutdown() twice (once to send a close_notify, and once to receive one) then OpenSSL can respond differently to the calling appl…

Updated under an hour ago (Nov 2, 2026, 12:20 AM ET)

Does this affect you?

It affects openssl and 59 other products. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stackFree account, 3 products Every CVE for openssl Exploited in the last 30 days

If an application encounters a fatal protocol error and then calls SSL_shutdown() twice (once to send a close_notify, and once to receive one) then OpenSSL can respond differently to the calling application if a 0 byte record is received with invalid padding compared to if a 0 byte record is received with an invalid MAC. If the application then behaves differently based on that in a way that is detectable to the remote peer, then this amounts to a padding oracle that could be used to decrypt data. In order for this to be exploitable "non-stitched" ciphersuites must be in use. Stitched ciphersuites are optimised implementations of certain commonly used ciphersuites. Also the application must call SSL_shutdown() twice even if a protocol error has occurred (applications should not do this but some do anyway). Fixed in OpenSSL 1.0.2r (Affected 1.0.2-1.0.2q).

CVSS: 5.9 MEDIUM (v3.1, NVD)CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
Weakness (CWE): CWE-203
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Not given
NVD analysis: Modified
Record last updated: Jun 16, 2026
First seen by InfoSec Signals: Nov 1, 2026

Affected products

Affected products

openssl openssl openssl:openssl	from 1.0.2 before 1.0.2r	NVD
canonical ubuntu_linux canonical:ubuntu_linux	16.04; 18.04; 18.10	NVD
debian debian_linux debian:debian_linux	8.0; 9.0	NVD
netapp active_iq_unified_manager netapp:active_iq_unified_manager	from 7.3; from 9.5; all versions	NVD
netapp altavault netapp:altavault	all versions	NVD
netapp cloud_backup netapp:cloud_backup	all versions	NVD
netapp clustered_data_ontap_antivirus_connector netapp:clustered_data_ontap_antivirus_connector	all versions	NVD
netapp element_software netapp:element_software	all versions	NVD
netapp hci_management_node netapp:hci_management_node	all versions	NVD
netapp hyper_converged_infrastructure netapp:hyper_converged_infrastructure	all versions	NVD
1–10 of 60

References

References

http://lists.opensuse.org/opensuse-security-announce/2019-03/msg00041.html	mailing-list, third-party-advisory
http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00019.html	mailing-list, third-party-advisory
http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00046.html	mailing-list, third-party-advisory
http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00047.html	mailing-list, third-party-advisory
http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00049.html	mailing-list, third-party-advisory
http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00080.html	mailing-list, third-party-advisory
http://www.securityfocus.com/bid/107174	third-party-advisory, vdb-entry
https://access.redhat.com/errata/RHSA-2019:2304	third-party-advisory
https://access.redhat.com/errata/RHSA-2019:2437	third-party-advisory
https://access.redhat.com/errata/RHSA-2019:2439	third-party-advisory
1–10 of 25

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.